-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 01 Jan 2012 18:10:58 +0000 Source: cyrus-imapd-2.2 Binary: cyrus-common-2.2 cyrus-doc-2.2 cyrus-imapd-2.2 cyrus-pop3d-2.2 cyrus-admin-2.2 cyrus-murder-2.2 cyrus-nntpd-2.2 cyrus-clients-2.2 cyrus-dev-2.2 libcyrus-imap-perl22 Architecture: ia64 Version: 2.2.13-19+squeeze3 Distribution: squeeze-security Urgency: high Maintainer: ia64 Build Daemon (alkman) Changed-By: Nico Golde Description: cyrus-admin-2.2 - Cyrus mail system - administration tools cyrus-clients-2.2 - Cyrus mail system (test clients) cyrus-common-2.2 - Cyrus mail system - common files cyrus-dev-2.2 - Cyrus mail system (developer files) cyrus-doc-2.2 - Cyrus mail system - documentation files cyrus-imapd-2.2 - Cyrus mail system - IMAP support cyrus-murder-2.2 - Cyrus mail system (proxies and aggregator) cyrus-nntpd-2.2 - Cyrus mail system (NNTP support) cyrus-pop3d-2.2 - Cyrus mail system - POP3 support libcyrus-imap-perl22 - Interface to Cyrus imap client imclient library Changes: cyrus-imapd-2.2 (2.2.13-19+squeeze3) stable-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix possible NULL pointer dereference via crafted message reference id caused by a missing sanitizing of the mail headers. This can be exploited from a client making use of the IMAP threading feature (CVE-2011-3481). Checksums-Sha1: 5e1d925d66f42eb486f8d55211e7416813fb61bf 7132322 cyrus-common-2.2_2.2.13-19+squeeze3_ia64.deb 595a85b7fb147adea3a4b1f754694bca90d98e0e 1218818 cyrus-imapd-2.2_2.2.13-19+squeeze3_ia64.deb 2bd8d30653873a000c99e8419c88340e68cf3570 350140 cyrus-pop3d-2.2_2.2.13-19+squeeze3_ia64.deb 4b477733116699fbfa884c85e8072cead7a87a3b 1431080 cyrus-murder-2.2_2.2.13-19+squeeze3_ia64.deb 1297a94f9077824f22a6c7f087498f064d63c89f 781984 cyrus-nntpd-2.2_2.2.13-19+squeeze3_ia64.deb 25c934a278e8ed69272631919e5c8ea079a9a83a 164038 cyrus-clients-2.2_2.2.13-19+squeeze3_ia64.deb 56f617c326d68ea68990567762851c8b84bd4997 320012 cyrus-dev-2.2_2.2.13-19+squeeze3_ia64.deb 77af5e9f56c2fc3383be0f7bbb99e35506c47ea0 252460 libcyrus-imap-perl22_2.2.13-19+squeeze3_ia64.deb Checksums-Sha256: 2e9973e59630443175fb126282b7017e13745e6a675b1ba806f9c459196dcc10 7132322 cyrus-common-2.2_2.2.13-19+squeeze3_ia64.deb 3fa706cad737b1e0921543433afd21bdf74c4ba76579c85b5b22787035d845ff 1218818 cyrus-imapd-2.2_2.2.13-19+squeeze3_ia64.deb 6ded9d8b3c27013e494f9d1430a216c6e5c2766bb8805ec63096fbad3421cd0f 350140 cyrus-pop3d-2.2_2.2.13-19+squeeze3_ia64.deb 115ad507ef0e1630a52346bf98ec564d6f515e43ef5cf251cc2b3564633bb85c 1431080 cyrus-murder-2.2_2.2.13-19+squeeze3_ia64.deb c4c647d3c13d82bc9da9bf17e0f73c44fcc3c35158736e6ff0353b51aef48c4a 781984 cyrus-nntpd-2.2_2.2.13-19+squeeze3_ia64.deb 1140be68c08b0aa2e2c238679fc4dd840c1c646b0a29937531c8e4db1ed057da 164038 cyrus-clients-2.2_2.2.13-19+squeeze3_ia64.deb 2ebb70156c5781b7b67b9ab19d8bc5a1c5c218d63ac65fcaee8535dc8e563d44 320012 cyrus-dev-2.2_2.2.13-19+squeeze3_ia64.deb d504b7f391334e97a49babdfa83665e9a6525f7d74ba3257cc51ee8248236a21 252460 libcyrus-imap-perl22_2.2.13-19+squeeze3_ia64.deb Files: 2bd388f0ead9a01835c1548a8aac3d2b 7132322 mail extra cyrus-common-2.2_2.2.13-19+squeeze3_ia64.deb 7d86b1b47501cd0a20e6c233ed5e0213 1218818 mail extra cyrus-imapd-2.2_2.2.13-19+squeeze3_ia64.deb fa608a542d60d2419824ff2f271321d1 350140 mail extra cyrus-pop3d-2.2_2.2.13-19+squeeze3_ia64.deb 7219300e97b8cb1e941d369d5e8f5ab5 1431080 mail extra cyrus-murder-2.2_2.2.13-19+squeeze3_ia64.deb 2a3ce40b2eeb84fb6a3549bb84b0811b 781984 mail extra cyrus-nntpd-2.2_2.2.13-19+squeeze3_ia64.deb 2d44114ae5ceb7a6df3157f2ad3678d9 164038 mail extra cyrus-clients-2.2_2.2.13-19+squeeze3_ia64.deb fe684386914b86f560e3151af33d9e92 320012 devel extra cyrus-dev-2.2_2.2.13-19+squeeze3_ia64.deb 5530edc6706d28e2f248229879f79a67 252460 perl extra libcyrus-imap-perl22_2.2.13-19+squeeze3_ia64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJPALXtAAoJEEvpbjz8HoZoPC4P/RbxMMEhEr6v/wA8gCmJHFVw fgE10wUO1luTnwWjMc7sSWOFZ+P3KFwsog3Db45ADhMZSK5JrNjj4HF5nTLpijGM cJip2HutVXS6puzhcUAYbNzSR5ueBnY8x1nFrXok8LeQnIiNZfa5HBHqwj6cY7Cu DVuqRk1+CSCwjH/VHaIWw0PiVvXu71vrEoppc0i+KOqdohbNCEFiu8BQy1G/pcP2 3WyJEC+9GDiF9yXPtPtm51mEhMPmgn0glEhMIvR5T5JMucmattJkHw3KUk/4vLxV 47+dIkmb+401bUSwKfDfnAXgZ3SdtsiFOYDtqkGba1QhDv5+Hsr+K6tUr8776JsD e7r5In0aYgcRI+SyiuVFyi/XGOoZ1whu5MbcCaJexVusvLg9BtrcOveivmPTCxjk qM3+U/zGdIcKQjMxkdHxVdWfTGNr3+ekhKNGZ7ZcDq5LCSImHxAvTuoyPrjxIEXE HlCOX1sCYZruBswfiNpyihChNoul+jrJDjUy/w0hYG16tZg0SqjJhiSDZEGWV9DM A/GiPlMWHHfuxxRwWz9qLTZm0+EDVSNE+jM7bpFK+6qGIN8LTF9H7y03f+hTltsy hLL1OiPD7SeJ/U22oN5SG7EHB7DveGPyWpG+CA47cw2ELrrGjoAQgHtfh91evm0x HAe/XsWS/AngHzZaPE7z =8H+2 -----END PGP SIGNATURE-----